Function registerAPIWithStore

controlplane/admin/api.go:93–124

(r *gin.RouterGroup, store apiStore, info OrgStackInfo, fetcher PeerFetcher)

	// Generic read-only models explorer (sidebar + table + detail UI). Reads
	// the concrete store directly because it needs the runtime schema name and
	// raw DB for tables the typed apiStore interface doesn't surface.
	registerModelsAPI(r, store)
	// Admin-only Operators management (the admin-console access list). Each
	// route self-gates with RequireAdmin; mutations are audited via the group.
	registerOperatorsAPI(r, store)
	// Monthly per-team usage for the "Usage" page — a read-only view over the
	// billing buffer (see usage_api.go).
	registerUsageAPI(r, store, awsRegion)
}

func registerAPIWithStore(r *gin.RouterGroup, store apiStore, info OrgStackInfo, fetcher PeerFetcher) {
	h := &apiHandler{store: store, info: info, fetcher: fetcher}

	// Orgs CRUD
	r.GET("/orgs", h.listOrgs)
	r.POST("/orgs", h.createOrg)
	r.GET("/orgs/:id", h.getOrg)
	r.PUT("/orgs/:id", h.updateOrg)
	r.DELETE("/orgs/:id", h.deleteOrg)
	r.GET("/orgs/:id/warehouse", h.getManagedWarehouse)
	r.PUT("/orgs/:id/warehouse", h.putManagedWarehouse)
	// Focused endpoint for pinning a tenant to a specific worker image and
	// DuckLake spec version — the operator workflow we want to be able to
	// run without ever touching the config-store DB directly.
	r.PATCH("/orgs/:id/warehouse/pinning", h.patchTenantPinning)

	// Org teams (duckgres_org_teams). The per-org list/upsert/delete routes
	// (GET/POST /orgs/:id/teams, DELETE /orgs/:id/teams/:team_id) are
	// registered by the provisioning API on this same group — gin refuses
	// duplicate routes, so the admin surface adds only what provisioning
	// doesn't have: the cross-org list, a CREATE-ONLY POST (org_id in the
	// body, mirroring POST /users), and the update. The PUT is the operator
	// break-glass: it can edit EVERY team setting, including schema_name and
	// the legacy table-name overrides — schema immutability is a rule for the
	// user-facing product flows, not for operators repairing rows here.